$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json) Hash identifier: JAQh19dyo68jNGMpDAWkUQ0u4U7NVFpAIWbnJs/ktdA= Subject key identifier: 37:DD:76:B0:00:CE:A1:9D:84:B2:29:69:60:6A:50:6B:CE:FF:3A:5A Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Certificate serial: 074D94FBFF8C3528F6D515D82736942C8CDCA815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft Manifest number: 0335 Signing time: Thu 16 Apr 2026 21:51:46 +0000 Manifest this update: Thu 16 Apr 2026 21:46:46 +0000 Manifest next update: Mon 20 Apr 2026 01:33:46 +0000 Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: hJSbwfG1cpNugu/2m1Uu9Q1ZA/RjL51fwgw4VL7icqM=) 2: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=) 3: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 01:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4d:94:fb:ff:8c:35:28:f6:d5:15:d8:27:36:94:2c:8c:dc:a8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8 Validity Not Before: Apr 16 21:46:46 2026 GMT Not After : Apr 20 01:33:46 2026 GMT Subject: CN=37DD76B000CEA19D84B22969606A506BCEFF3A5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:bf:8b:ed:4a:04:a0:94:2a:58:67:b0:71: 0c:af:3f:0c:7c:91:76:db:62:9a:ac:26:0b:db:c8: 58:00:39:fa:6f:a9:f3:f0:2a:93:a3:d7:9a:ec:c1: f1:dc:a2:bf:b2:e3:42:fc:4f:8c:8b:e8:58:9d:b7: 99:19:95:f6:db:95:70:cc:5c:53:82:fc:e4:25:da: 49:33:c7:56:8d:99:1d:a2:38:f0:d9:a3:95:7d:ae: 00:69:5c:f2:4c:31:be:50:88:c3:b5:56:30:6c:1a: a4:4f:ca:73:8d:7d:05:66:5b:6e:32:d1:9f:10:3b: f0:9a:0d:62:4b:96:64:41:9f:92:a5:e3:d9:39:4f: 91:f2:76:8d:21:eb:b6:2f:fd:d3:24:88:3f:f6:dc: e4:be:33:a4:a9:1e:d3:c0:42:62:ce:34:30:97:32: eb:64:c8:d9:9a:08:77:3a:86:00:be:a4:63:66:24: 8e:fc:c3:0c:91:f5:12:8a:70:36:22:5d:36:9a:52: 01:14:b2:b7:2e:23:48:2b:84:36:1e:af:51:cd:db: f0:93:be:8a:4c:81:21:2e:b5:04:27:59:b1:c8:5c: d5:8e:c8:4a:8a:ac:f0:a7:0e:ca:43:22:b5:cc:3b: 3f:b7:48:2f:f7:8b:02:d0:73:78:0a:8c:d8:87:c3: e0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DD:76:B0:00:CE:A1:9D:84:B2:29:69:60:6A:50:6B:CE:FF:3A:5A X509v3 Authority Key Identifier: keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f8:29:a6:0a:fe:4b:20:88:94:3c:dc:5e:40:66:d3:35:37: 97:74:f3:d5:61:b2:ad:44:b9:25:0f:e6:cb:73:f9:73:05:94: 7f:4d:30:0a:30:e8:6f:1b:30:c4:84:bf:c6:68:b9:7e:41:7c: bd:99:76:fb:e3:53:cc:e5:3a:73:3d:3a:68:fc:3f:70:1e:45: 8d:87:21:79:ec:19:90:31:49:0d:c9:aa:e4:82:43:21:e6:5f: 75:c7:7e:32:e2:51:4f:23:aa:21:be:d6:dd:ec:33:ab:7c:c3: 85:b7:01:4d:ee:93:e3:72:d3:49:75:ee:10:92:29:67:c4:d3: c9:77:91:85:b6:f6:4e:e4:20:fb:a3:6e:f7:4b:e0:6d:f7:cc: 19:f3:d8:f9:b1:19:4e:81:04:55:e7:16:6e:81:93:ae:25:b6: 4b:fc:05:05:10:df:fe:0b:76:97:83:2d:7a:e2:66:20:2a:92: 10:d7:9e:bb:c8:4e:5f:c7:0f:ae:c2:0c:0a:10:0c:02:f9:0f: bc:b1:11:2a:a2:58:24:44:f7:c0:84:32:d6:ed:46:75:d1:0b: 81:56:8d:6a:a6:0b:b5:84:f7:6b:80:5b:e5:f5:8d:aa:bf:26: 11:54:84:07:bf:57:50:76:89:06:93:10:4e:f8:d2:be:03:5f: bf:55:f0:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB02U+/+MNSj21RXYJzaULIzcqBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAz QjA3MkVEODAeFw0yNjA0MTYyMTQ2NDZaFw0yNjA0MjAwMTMzNDZaMDMxMTAvBgNV BAMTKDM3REQ3NkIwMDBDRUExOUQ4NEIyMjk2OTYwNkE1MDZCQ0VGRjNBNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGL+L7UoEoJQqWGewcQyvPwx8 kXbbYpqsJgvbyFgAOfpvqfPwKpOj15rswfHcor+y40L8T4yL6Fidt5kZlfbblXDM XFOC/OQl2kkzx1aNmR2iOPDZo5V9rgBpXPJMMb5QiMO1VjBsGqRPynONfQVmW24y 0Z8QO/CaDWJLlmRBn5Kl49k5T5Hydo0h67Yv/dMkiD/23OS+M6SpHtPAQmLONDCX MutkyNmaCHc6hgC+pGNmJI78wwyR9RKKcDYiXTaaUgEUsrcuI0grhDYer1HN2/CT vopMgSEutQQnWbHIXNWOyEqKrPCnDspDIrXMOz+3SC/3iwLQc3gKjNiHw+BVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN912sADOoZ2EsilpYGpQa87/OlowHwYDVR0j BBgwFoAUi+H1CpCTiubU5temoqIvADsHLtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OGI1OGFlZS1lOGVlLTQyODctYTJiOC02MTYxNTVjM2VlYzIvMC84QkUxRjUwQTkw OTM4QUU2RDRFNkQ3QTZBMkEyMkYwMDNCMDcyRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJGMDAzQjA3 MkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNThiNThhZWUtZThlZS00Mjg3LWEy YjgtNjE2MTU1YzNlZWMyLzAvOEJFMUY1MEE5MDkzOEFFNkQ0RTZEN0E2QTJBMjJG MDAzQjA3MkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX4KaYK/ksgiJQ83F5AZtM1N5d089Vhsq1E uSUP5stz+XMFlH9NMAow6G8bMMSEv8ZouX5BfL2ZdvvjU8zlOnM9Omj8P3AeRY2H IXnsGZAxSQ3JquSCQyHmX3XHfjLiUU8jqiG+1t3sM6t8w4W3AU3uk+Ny00l17hCS KWfE08l3kYW29k7kIPujbvdL4G33zBnz2PmxGU6BBFXnFm6Bk64ltkv8BQUQ3/4L dpeDLXriZiAqkhDXnrvITl/HD67CDAoQDAL5D7yxESqiWCRE98CEMtbtRnXRC4FW jWqmC7WE92uAW+X1jaq/JhFUhAe/V1B2iQaTEE740r4DX79V8GA= -----END CERTIFICATE-----Generated at Fri Apr 17 16:55:14 2026 by rpki-client